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Microprocessor- based systems are used in many applications of 
modern telecommunications. The controlling program of most micro- 
processor systems is stored in firmware which is usually coded into 
erasable programmable readonly memory chips (eprom). As new 
services are implemented, there is a continuing need to update the 
firmware, a potentially expensive process. In this paper, a method is 
presented for determining the resources necessary for updating 
eprom firmware from a centralized location by using a rotating 
inventory scheme. 

I. INTRODUCTION 

Microprocessor-based systems are used in many applications of 
modern telecommunications. The controlling program (firmware) of 
most microprocessor systems, is coded into either read-only memory 
(rom), programmable read-only memory (prom), or erasable pro- 
grammable read-only memory (eprom) chips, which are mounted on 
circuit boards. As new services are implemented in the microprocessor- 
based systems, there is a continuing need to update the firmware. 
Frequent updating of firmware is more effectively accomplished by the 
use of eprom chips, because they can be repeatedly erased by exposure 
to ultraviolet light and reprogrammed by the use of a specially designed 
unit. Typical eprom circuit packs may require 0.5 hours for erasing 
and 1.5 hours for programming. 

One serious drawback to using eprom firmware is that it cannot be 
altered by means of a data link. A change in firmware entails the 
removal and reinstallation of the memory circuit boards or packs. 
Because of this manual process, updating a large number of micro- 
processor systems may involve a long and costly procedure. 

The object of this paper is to provide a quantitative method to 
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determine the level of spare boards and programming units necessary 
to achieve a predeterminated time span for updating all the micropro- 
cessor-based systems. 

1. 1 Firmware update process 

Typically, there are three conditions that could affect a firmware 
module: (i) Program updates because of new feature introduction, (ii) 
program changes caused by fixing of "bugs," and (Hi) program changes 
because of hardware updates. In general, a firmware update process 
begins with a notice of a change sent by the microprocessor manufac- 
turer to centralized programming sites where ultraviolet light pro- 
gramming units and a spare inventory of circuit packs are kept. Over 
a dial-up connection, the programming unit receives the latest program 
version and writes it onto spare circuit packs taken from inventory. 
When all spare circuit packs are rewritten they are shipped to specific 
distribution sites associated with a subset of the microprocessor sys- 
tems. From each distribution site, craft persons are dispatched to 
install the updated boards. The removed circuit packs are then re- 
turned to the centralized programming site for updating. The recycling 
process continues until all the microprocessor systems in the field, plus 
their allocated maintenance spares, are updated. 

1.2 Basic model 

The flow and assumptions of the basic update model, for a typical 
process schedule, are shown in Fig. 1. The process of updating begins 
when a firmware change message is received at the centralized pro- 
gramming site. An initial period is used for administrative procedures, 
unpacking of inventoried circuit packs, erasing, and reprogramming, 
packing and crating, and shipping of the circuit packs to the distribu- 
tion sites. Out of this initial time interval, it can be assumed that one 
day will be needed for reprogramming the spare eprom circuit packs. 
If there are not enough programming units, a delay in the update 
process could be incurred. 

Once the rewritten boards arrive at the distribution sites, the asso- 
ciated microprocessor systems are scheduled for update. The process 
of coordinating the installation forces necessary for the update is not 
immediate, and the following distribution can be assumed to charac- 
terize the update interval: a proportion, ii, of the updated boards are 
installed and an equal amount of outdated boards are returned to the 
centralized location for reprogramming in one week; a proportion, i 2 , 
of the updated boards are recycled in two weeks; a proportion, ia, in 
three weeks, and so on until all the boards are recycled. 

Once the outdated boards arrive back at the programming site, the 
process of reprogramming begins again. This procedure continues until 
all of the microprocessor systems in the field have been updated. 
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Fig. 1 — Typical firmware update process. 



II. SYSTEM PARAMETERS 

The system parameters to be determined are the update time, the 
total update spares, and the number of programming units. Update 
time, T, is defined as the interval in weeks between a change notice 
and the time at which all the systems in the field, including mainte- 
nance spares, have been updated. To determine T, it is necessary to 
define the concepts of update spare, total update spares, total systems, 
and spare ratio. 

An update spare is defined as one complete set of eprom circuit 
packs for one microprocessor system. Since an update spare is defined 
as one full set of boards, an update spare may be equated to a 
microprocessor system and vice versa. Total update spares is defined 
as the number of eprom circuit packs at the centralized programming 
site available for initiating the update process. Total systems is defined 
as the total number of microprocessor-based systems in service and 
their maintenance spares to be updated when a program change is 
issued. 

The spare ratio, S, is defined as the ratio of total update spares to 
total systems; that is, 
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Total Update Spares 
Total Systems 

A spare ratio of one, S = 1, says that for each microprocessor system 
in the field and its maintenance spares there is one set of update spares 
at the programming site. In this case, T is the time required for one 
pass through the basic flow shown in Fig. 1. Similarly, if S is 0.5, one 
spare for every two systems in the field and their maintenance spares, 
T is the time required for approximately two passes through the basic 
flow. By following this reasoning, it becomes clear that T is a function 
ofS. 

III. MODEL FORMULATION 
3. 1 Update time 

The update time can be determined by considering the following 
installation distribution mentioned in Section I and shown in Table I. 
In Table I, ij = proportion of boards updated in weekj, w = number of 
weeks required for returning all spares updated in week 0; ij = 0, for 
y' = andy > w, i.e., no system can be updated in week with spares 
reprogrammed in that week. Then, 

to 

which implies that after w weeks all the spares reprogrammed in week 
are returned. Define q(n) as the quantity of spares updated in week 
n, with n = 0, week of change message, and n = T, week by which all 
systems are updated. The update distribution can be modeled by 
q(0) = Total Update Spares = Sx Total Systems, 

q(l) = iig(0), 
q(2) = i 2 q(0) + hq(l), 
q(3) = i 3 q(0) + i 2 q(D + iiq(2), 
: , and 

q(n) = J in-jqU). W 

y-o 
Equation (1) can be rewritten as: 

w 

q{n)= I ijq(n-j), (2) 

j-0 

since i = 0, and with initial conditions 

q(0) = Total Update Spares = Sx Total Systems, 

q( n ) = o, for n < 0. (3) 
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Table I — Distribution of 

microprocessor systems 

update 

Week of Update Proportion 
Process Updated 

1 l 

2 i 2 

3 i 3 



Equations (2) and (3) are the difference equations describing the 
microprocessor update process. To obtain the solution of the difference 
equation, define the ratio of total update spares updated in week n: 

— ^ n ^ 

Total Update Spares' 

where 

< a(n) < 1. 
Substituting q{n) from eq. (4) into eq. (2) 

w 

a(n) = £ ija(n-j), (5) 

y-o 

and 

a(0) = 1. (6) 

Before solving eq. (5), notice that the update process ends when the 
total number of updated spares equals the number of total systems; 
that is, 

T 

£ q(n) = Total Systems, (7) 

n-l 

where T is the update time. 

Substituting eq. (4) into eq. (7) and using the definition of spare 
ratio, 

T 1 

1 a(n) = -. (8) 

n = ] O 

Expressions (5), (6), and (8) are the difference equations for the weekly 
ratio of updated spares and T. 

To obtain T, eqs. (5) and (8) must be solved. The solution can be 
obtained using a computer simulation, or a closed-form technique such 
as the z-transform. To use the 2-transform method, recall the following 
properties: 1 
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( i ) Translation property : 



k-i 



Z[f(n + k)] = z k F(z) - z k £ f{j)z'\ 

7-0 



where F(z) = Z[f(n)]. 

(ii) Summation property: 

I f(n) 



2 F(z)+— Z — £ f(n). 



2-1 



Z - 1 n--. 



{Hi) Final value property: 

]wif(t)=Km(z-l)F(z). 

t->ao 2—1 

Using property (i) in eqs. (5) and (6) gives: 

z w 



A(z) = 



z w -l ijz"-' 



(9) 



where i and w were previously defined, and 

A(z) = Z[a(n)] . 
Using property (ii) in eq. (8), and the initial conditions for a(n), gives 



I a(n) 



2-1 



A (z). 



(10) 



Substituting eq. (9) into eq. (10) and considering that i = 0, gives 



2 a(n) 
n-i 



Z y-l 



2-1 



2" - I ijz w ~ j 



The inverse z-transform of eqs. (9) and (6) gives the following relation- 
ship between T and S: 



i-*- 1 



2 i-1 



2-1 



2" - 2 *>*""' 
/-I 



(ID 



The right-hand term of eq. (11) can be inverted using classical tech- 
niques and 2-transform tables. 

An example can be used to show an application of the 2-transform 
technique. Consider the firmware update distribution shown in Fig. 1 
and given in Table II. 
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Table II — Firmware 

update distribution for a 

six-week turnaround 

interval (w = 6) 

Week of Proportion 

Update Updated 

Process ij 

3 O10 

4 0.50 

5 0.30 

6 0.10 



Substituting the above values of i, in eq. (11), 

1 = , [ z O.lz 3 + 0.5z 2 + 0.3z + 0.1 ] 

S Z [z - 1 z 6 - O.lz 3 - 0.5z 2 - 0.3z - 0.1 J' (12) 

Using the partial-fraction expansion technique for inverting eq. (12), 
the closed-form expression for S as a function of T is 

- = 0.22727T - 0.36983 

+ 0.09374(-0.67495) r 

+ 0.03228(0.45089) 7 sin(2.27567T + 1.23494) 

+ 0.32472(0.85369) 7 sin(1.41837T + 0.85769). (13) 

A closed form solution to this transcendental equation in T is difficult 
to obtain. An approximate solution is obtained when T is large. In this 
case 

- = 0.22727T - 0.36983, (14) 

or 

T « -^- + 1.62725, (15) 

which is the expression for T. Equation (15) satisfies all update times 
with an error of less than 2 percent for T > 10, and with a maximum 
error of 7 percent occurring in week 7. 

An integer solution can be obtained by making: 



T = 



4.4 
- + 1.6 



(16) 



with a maximum positive error of 1 week. The f-1 operator denotes 
rounded-up approximation. Figure 2 shows the representation of the 
update time as a function of the spare ratio for this example. 
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Fig. 2— Update time. 



A more simplified approach was used for solving the original real- 
life update time problem. From the given installation distribution, the 
expected number of weeks required to program, ship, and install a set 
of spares, i.e. one pass through the basic flow of Fig. 1, is 

T = 0.1 X 3 + 0.5 x 4 + 0.3 X 5 + 0.1 X 6 = 4.4 weeks. 

This means that one reprogramming process for the average micro- 
processor system takes 4.4 weeks. The update time is determined by 
the number of times this process will be repeated, plus the error 
introduced by using the expected value approach. The number of 
times the process is repeated depends on the spare ratio. Therefore, 
the update time can be represented by the following equation: 

T = — + error, 

which agrees with eq. (16) for an error of 1.6. 

The update time algorithm shows the dependency between T, S, 
and the microprocessor's update distribution. For an illustrative pur- 
pose, assume that there are as many spare boards at the programming 
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site as microprocessor systems in the field, i.e., S = 1. In this case, 
T = 6 weeks. This period is the minimum time possible under the 
given basic assumptions. On the other hand, if we have spare boards 
available for only 50 percent of microprocessor systems in the field, S 
= 0.5, the update time according to the algorithm is T = 11 weeks. The 
conclusion is that T is directly proportional to the installation distri- 
bution and inversely proportional to S. 

3.2 Total update spare requirements 

The number of update spares necessary at the centralized program- 
ming site is determined by the update time and the total number of 
microprocessor systems. The update time determines the spare ratio 
which, when combined with the number of systems, gives the number 
of update spares as indicated in Section II: 

Total Update Spares = \S X Total Systems']. (17) 

For the example of Section 3.1, the update spare requirements for 
implementing a firmware update system for 150 total systems in 20 
weeks is computed as follows: 
First, the spare ratio for 20 weeks from Fig. 2 is; 

S = 0.24. 

Then, the number of update spares is given by 

Total Update Spares = |Tj.24 X 1501 = 36. 

3.3 Programming units 

The number of programming units necessary for a centralized op- 
eration can be determined as a function of their capacity. To determine 
the number of units, two concepts must be used: weekly spares and 
programming days. 

Weekly spares, q(n), already defined in Section III, is the number of 
spares returned each week to the site for reprogramming. The number 
of weekly spares is a function of the installation distribution. Program- 
ming days, P, is the number of days per week allocated to the erasing 
and programming of eprom circuit packs. 

The number of programming units is the following function of the 
weekly spares, the number of programming days, and the unit capacity: 



Programming Units = 



q(n) 1 



for all n, 



where C, microprocessor systems per day per unit, is the capacity 
factor of the unit. The number of programming units can be computed 
using the three following approaches. 
An upper bound for the weekly spares can be used as a starting point 

MICROPROCESSOR FIRMWARE UPDATING 2301 



for determining the number of programming units. The number of 
total update spares available at the site can be used for this purpose. 
In this case, the number of units is: 

Programming Units = 



Px C 



(18) 



This algorithm overestimates the number of programming units be- 
cause only in the initial week of the update process are weekly spares 
equal to update spares. In the following weeks, the number of spares 
returning vary according to the assumed installation distribution. 

A second approach for determining programming units is to make 
the weekly spares equal to the largest number of spares updated in 
any week after the initial week of the update process. In this case, the 
number of units is: 

Programming Units = max 



n>l 



PxC 



(19) 



This algorithm reduces the number of units required and introduces a 
delay in the first week of the update process. 

A third approach is to make the weekly spares equal to the expected 
number of spares returned each week for reprogramming. This is 
equivalent to the steady-state of the discrete time process. This ap- 
proach satisfies the programming assumption of one day in 50 percent 
of the weeks and incurs a one-day delay during the other 50 percent. 
Therefore, on the average, programming will require 1.5 days per week. 
As a result, the nondelayed update time, which was derived assuming 
one day per week for programming, must be increased by 10 percent 
(one-half a day per five-day week). In this case, the number of units is: 



Programming Units = 



Q 



PxC 



(20) 



where Q = expected number of spares returned each week. To evaluate 
Q, the final value theorem can be used. Property (Hi) of the z-transform 
methodology gives: 

Q - q(oo) = lim( 2 - l)Q(z) 

z-»l 

= Total Update Spares X lim(z - l)A(z). (21) 

z— »1 

Substituting eq. (9) into eq. (21) yields: 

Q = Total Update Spares X lim w . 

* _>1 z w - £ ijz w - j 
y-o 
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which is indeterminate of the type over 0, because £ ij = 1. The 

>-0 

application of l'Hopital's rule solves this problem. 

For the distribution given in the example of Fig. 1, the expected 
number of spares is: 

Q= ,7(00) = Total Update Spares X hm z ,_^Jl^_^ z . 01 

= Total Update Spares X 0.22727 

= Total Update Spares x A, 

where A is the expected ratio of total update spares returned each 
week. It can be seen that the reciprocal of A represents the average 
number of weeks required for one pass through the basic flow of Fig. 
1; that is, 

T = t = -rzz^z^z — 4.4 weeks. 
A 0.22727 

For the example of Fig. 1, where one day per week is assumed for 
reprogramming, and the unit capacity is three systems per day, eqs. 
(18), (19), and (20) become, respectively: 

Programming Units = 
Programming Units = 

Programming Units = 

Comparing eqs. (22), (23), and (24), it can be seen that eq. (24) reduces 
the number of programming units by a factor of more than four, with 
respect to eq. (22), with the introduction of a 10-percent delay in the 
update time. 

The algorithms discussed above are represented in Fig. 3. The 
number of required programming units are shown as a function of the 
number of total update spares. To contain the size of the plot, a scale 
factor, N, was introduced. Also included is a parameter D, which is the 
additional delay in the update time because of the reduced number of 
programming units at the centralized site. 

3.4 Example 

To have a better understanding of the determination of the resource 
requirements for the firmware update process, consider the following 
example. 
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For a projection of microprocessor systems, it is desired to determine 
the total update spares and programming unit requirements for the 
years 1982 and 1983, for an overall update time of 10 weeks in 1982 
and 15 weeks in 1983, under the assumption of providing the fewest 
number of programming units. (See Tables III, IV, and V.) 

IV. ECONOMIC IMPACT OF FIRMWARE UPDATE SCHEMES 
4. 1 Economic dependencies 

Based on the obtained algorithms, an economic analysis of an update 
scheme can be performed if the capital and expense costs associated 
with the process are known. 

The capital expenditures for the firmware update process are due to 
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Table III — Forecast of microprocessor 
systems 



Year 


Total 
Systems 


Update Time 
Weeks 


1982 
1983 


26 
116 


10 

15 


Table IV — Update spares from Fig. 2 


Nondelayed 
Update 
Year Time 


Spare 

ratio 


Total 
Total Update 
Systems Spares 


1982 9 

1983 13 


0.59 
0.39 


26 15 
116 45 



Table V — Programming 

units from Fig. 3 

(0 = 0.1) 

Programming 
Year Units 



1982 
1983 



the total update spares and programming unit requirements. There- 
fore, the capital is a function of the desired update time, the total 
number of microprocessor systems, and the delay tolerated. If the 
capital budget is exceeded, the total update spares and programming 
units must be decreased to meet the dollar constraints, increasing the 
update time. The update time is independent of the number of micro- 
processor firmware changes; therefore, the capital is also independent 
of the change rate. 

The update expenses are due to the labor costs associated with the 
programming unit operation, the installation efforts, and the costs of 
crating and shipping. Since these tasks are performed for each micro- 
processor system each time a program change occurs, the expenses are 
dependent on the system market and program change rate. The 
economic dependencies are shown in Fig. 4. 

Using standard techniques, we can determine the economic feasibil- 
ity of alternate memory schemes for microprocessor-based systems. 
One alternative, for example, could be to determine the benefits of 
replacing eprom memory with random access memory (ram) and 
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Fig. 4 — Economic dependencies. 

magnetic bubble store as backup. This possibility, even though initially 
more expensive, has the capability of being updated electrically via a 
data link, and may offer savings over the life cycle of the system. 

V. SUMMARY 

Algorithms related to the eprom firmware update process for micro- 
processor systems have been developed in this paper. They give the 
update time, the number of update spares, and the numer of program- 
ming units required at a centralized site for a given firmware installa- 
tion distribution. The algorithms presented do not render policy deci- 
sions, but enable the user to determine the economics and responsive- 
ness of alternative administrative schemes. 
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